Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File:                     8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier:          +XlVvsa0tixbsFGalyzpwt4aH+DeODxPXYYsZJRp7ew=
Subject key identifier:   77:CB:F5:4C:6D:01:59:04:7B:DE:6C:8C:4A:5F:96:4A:1E:6A:30:BB
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer:       /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial:       01959074012487BADF22F737892EBD691C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number:          01A2
Signing time:             Thu 13 Mar 2025 17:01:16 +0000
Manifest this update:     Thu 13 Mar 2025 17:01:16 +0000
Manifest next update:     Fri 14 Mar 2025 17:01:16 +0000
Files and hashes:         1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: L3Xso6DQW3eE2z2Y8WxBMxgOFNaIkQf+MsSZOv/ktVs=)
                          2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=)
                          3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=)
                          4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:74:01:24:87:ba:df:22:f7:37:89:2e:bd:69:1c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
        Validity
            Not Before: Mar 13 17:01:16 2025 GMT
            Not After : Mar 14 17:01:16 2025 GMT
        Subject: CN=77cbf54c6d0159047bde6c8c4a5f964a1e6a30bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d1:e7:50:93:60:c6:96:22:70:10:14:ea:3b:
                    fd:e8:c1:fd:5d:12:65:40:51:96:53:6d:43:e8:e1:
                    63:b9:e2:8f:08:46:8b:d5:4b:80:bc:df:9b:b4:3e:
                    ce:91:21:e0:bd:9e:d7:6e:5c:28:48:3a:1e:38:2a:
                    2b:36:43:a5:ec:3b:99:6e:d6:0c:52:43:1f:79:4c:
                    cc:c4:ba:1d:08:78:12:36:71:d3:74:04:a3:8e:3f:
                    a9:10:b6:63:35:8a:40:3e:3f:fb:85:33:0f:07:b4:
                    87:eb:d4:59:d3:87:d4:f0:39:0b:25:91:66:e2:36:
                    94:0a:c4:10:6f:58:1a:37:25:c7:3b:c0:ee:7f:ee:
                    f6:6b:d2:33:08:fa:23:32:f8:90:2d:46:39:0b:bd:
                    ab:59:73:3a:af:15:a2:58:b4:f4:fd:81:42:92:91:
                    da:6c:13:47:ac:c3:eb:a5:f7:11:88:49:cf:49:6d:
                    85:08:bc:14:69:dc:bf:de:92:63:f1:94:43:8b:f7:
                    a2:eb:17:81:bb:f7:03:f6:49:07:4f:8c:b8:40:4c:
                    8c:cc:4a:03:d2:91:d2:fe:a3:90:13:a1:a3:53:44:
                    e6:78:03:c7:a9:8f:25:f6:b9:3e:9f:5d:8c:79:15:
                    0c:36:f8:2b:de:42:bb:c1:b7:75:20:62:8f:15:78:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CB:F5:4C:6D:01:59:04:7B:DE:6C:8C:4A:5F:96:4A:1E:6A:30:BB
            X509v3 Authority Key Identifier:
                keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:df:23:8a:47:30:a1:f3:2f:f7:e0:d8:e1:eb:95:d5:c6:
         37:ca:5d:75:53:f1:21:55:51:5b:33:32:42:ce:9f:42:d0:60:
         d4:0a:eb:1c:f5:2f:c9:ca:a8:ce:ea:f2:31:4e:49:0f:23:f0:
         45:77:6a:77:16:51:55:51:39:72:28:cc:38:d1:34:90:9a:0a:
         81:c4:86:47:fd:b7:31:fd:3b:32:c7:f8:a8:fb:56:5d:78:4f:
         2f:6e:f4:8a:52:2b:f1:a3:eb:57:ef:d5:af:91:41:e5:8b:d8:
         06:f9:c4:e8:12:f6:fa:d2:ec:6b:f1:0d:b9:70:04:0a:33:e7:
         b7:18:93:ee:a3:e4:33:19:de:21:fa:7c:68:a9:64:6c:51:1b:
         9b:f1:11:4a:e4:42:22:6c:72:47:49:11:07:d7:f3:da:e6:5b:
         9a:fd:55:a8:3d:f2:ae:b9:60:91:a7:b4:44:69:ec:8b:61:55:
         ee:4c:1e:34:2e:7f:2f:77:6a:4b:d4:c0:d2:8d:83:ca:34:3b:
         60:d4:c7:96:21:8f:b2:ef:f9:d5:b2:17:f8:27:fa:18:49:b0:
         b5:32:d1:37:3e:19:ae:58:95:63:59:68:ae:45:e5:a7:d7:27:
         d7:84:75:21:af:40:55:54:3f:47:26:91:93:4e:f2:47:d3:00:
         3c:3b:90:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:36 2025 by rpki-client